$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8bf15993-9e0b-374c-b8b4-da8beb66c3e2.roa File: 8bf15993-9e0b-374c-b8b4-da8beb66c3e2.roa (raw, json) Hash identifier: we8cL1su8+66TR083b25tNqTu4YKj7uN0XA0JI8qi4s= Subject key identifier: 38:98:30:A1:BD:69:59:30:CA:47:D0:EB:D5:56:0E:F9:DD:34:BB:22 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F4328584A00DAA753C8B9543C22927380 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8bf15993-9e0b-374c-b8b4-da8beb66c3e2.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 36522 IP address blocks: 207.35.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:a7:53:c8:b9:54:3c:22:92:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=1e42f5c0-88f3-4e0f-bd9a-86e7ba1cf8a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:be:88:ac:cd:e7:cd:f3:bb:ae:2f:6c:f1:69: c0:44:76:14:fe:01:30:3e:8d:b4:04:2f:b7:cf:43: a5:7d:7b:33:19:0e:14:bb:50:98:08:2a:62:60:4a: 4f:20:24:cb:27:1d:8d:a0:27:ee:f5:86:a4:e3:e5: af:04:e5:69:ba:1c:44:cd:24:41:9e:69:25:d2:38: 91:d5:ea:36:35:4e:a2:28:a4:5f:5a:c9:3e:f5:f2: d1:85:f6:42:a6:ed:8c:4e:38:cf:63:cf:64:2d:25: 26:0f:97:28:3c:80:c1:f6:49:18:12:5e:57:9b:da: 7f:25:c3:1f:3a:20:8e:f9:56:0a:39:96:0d:b1:3c: 59:1b:f8:70:f2:2a:f4:a4:ac:8f:8b:12:d7:5d:4b: 77:9d:4a:d5:1b:22:75:2c:e2:92:a6:da:60:28:ff: 39:4d:f8:59:e2:25:d1:64:18:47:b9:4e:bf:a0:23: e2:67:c6:f4:91:54:83:64:19:0b:cb:71:a5:ee:f4: 1c:ef:40:ee:28:7c:22:19:22:6b:27:5c:55:ba:7e: 18:25:62:6e:05:e9:3d:88:7d:74:cc:05:25:db:b8: 1c:c6:cd:10:f6:ee:95:5f:e6:2a:63:c2:02:85:f4: a5:f9:5f:62:4e:c1:a5:19:ab:59:76:5c:aa:04:2c: b5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:98:30:A1:BD:69:59:30:CA:47:D0:EB:D5:56:0E:F9:DD:34:BB:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8bf15993-9e0b-374c-b8b4-da8beb66c3e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 207.35.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ea:06:dd:f6:ab:80:a0:2c:bd:36:79:0a:5a:d8:0b:a8:9b: 82:98:1b:2b:0f:19:2a:0f:2b:00:69:1a:b2:7e:0d:a8:a9:36: fe:14:bf:6a:a4:f5:76:22:5d:1a:fc:36:10:02:c4:6b:d9:2e: cb:bf:46:ea:2f:16:e3:cc:73:bd:6b:0f:c5:ee:d5:a2:d5:d8: 93:80:17:0e:cf:79:11:6f:35:60:66:6d:15:ff:34:e7:82:55: f6:cb:f7:66:3c:71:1e:97:a4:86:c0:31:00:ca:38:37:04:09: 3f:ec:67:4b:e4:67:bd:ca:29:48:7e:91:49:b4:2a:88:0e:35: 2e:16:b6:6b:80:fa:25:97:72:d6:55:03:10:37:f4:8a:fd:ad: 2a:90:9d:fc:da:54:c9:86:09:30:b0:01:d0:12:88:57:43:53: d4:d1:1c:87:85:d0:58:84:7e:a6:f4:84:d4:04:c2:e3:47:18: 5a:43:8f:e4:1a:44:be:09:73:92:0a:14:3c:52:66:15:75:23: 2d:a3:7b:a2:ee:54:39:ae:71:f8:55:2c:50:aa:34:dd:9f:9d: 1a:c4:05:41:13:08:d3:9d:df:e3:8b:4e:47:69:a5:8a:ae:cf: 01:33:1b:5a:12:39:7c:12:13:6e:cc:e0:cd:68:1d:cf:bc:d4: 98:da:13:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2qdTyLlUPCKSc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk MWU0MmY1YzAtODhmMy00ZTBmLWJkOWEtODZlN2JhMWNmOGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL6IrM3nzfO7ri9s8WnARHYU/gEwPo20BC+3 z0OlfXszGQ4Uu1CYCCpiYEpPICTLJx2NoCfu9Yak4+WvBOVpuhxEzSRBnmkl0jiR 1eo2NU6iKKRfWsk+9fLRhfZCpu2MTjjPY89kLSUmD5coPIDB9kkYEl5Xm9p/JcMf OiCO+VYKOZYNsTxZG/hw8ir0pKyPixLXXUt3nUrVGyJ1LOKSptpgKP85TfhZ4iXR ZBhHuU6/oCPiZ8b0kVSDZBkLy3Gl7vQc70DuKHwiGSJrJ1xVun4YJWJuBek9iH10 zAUl27gcxs0Q9u6VX+YqY8IChfSl+V9iTsGlGatZdlyqBCy17wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiYMKG9aVkwykfQ69VWDvndNLsiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOGJmMTU5OTMtOWUwYi0z NzRjLWI4YjQtZGE4YmViNjZjM2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzyPrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLqBt32q4CgLL02eQpa2Auom4KYGysPGSoPKwBpGrJ+DaipNv4Uv2qk 9XYiXRr8NhACxGvZLsu/RuovFuPMc71rD8Xu1aLV2JOAFw7PeRFvNWBmbRX/NOeC VfbL92Y8cR6XpIbAMQDKODcECT/sZ0vkZ73KKUh+kUm0KogONS4WtmuA+iWXctZV AxA39Ir9rSqQnfzaVMmGCTCwAdASiFdDU9TRHIeF0FiEfqb0hNQEwuNHGFpDj+Qa RL4Jc5IKFDxSZhV1Iy2je6LuVDmucfhVLFCqNN2fnRrEBUETCNOd3+OLTkdppYqu zwEzG1oSOXwSE27M4M1oHc+81JjaE6M= -----END CERTIFICATE-----Generated at Tue Jul 1 00:51:07 2025 by rpki-client